Benjamin Samuels Email & Phone Number

Brooklyn, New York, Us

Redwood City, California, Us

Provided program+product management for various security team initiatives. Mentored team members on how to best plan and execute their projects. Performed architecture reviews for new services/features to foster building security into the product from the start.

Redwood City, California, Us

Designed and implemented IaaC repositories for managing various IAM systems including access to Google Kubernetes Engine(GKE), access to Hashicorp Vault, and access to various Google Cloud Platform products. These projects made access relationships more auditable, helped engineers get access to various products faster, and reduced Security/Ops team toil.Designed and implemented a secure secret storage system using Hashicorp Vault. This project greatly improved Evernote's secret management practices & opened the doors to continuous scanning for secrets accidentally committed to source control. This project required working closely with development teams of the various backend microservices in order to migrate to the new system. Redesigned Evernote's IAM process to a new "job/task" architecture. This new system allowed engineering teams to self-manage access to cloud resources without compromising the security of the system as a whole. This architecture allowed security to stay "hands-off" for the majority of access requests and helped reduce the amount of overhead required to onboard new engineers. Designed and implemented a security production readiness process for backend services. This process would ensure that new backend services follow certain secure coding practices, follow secure Kubernetes/Service Mesh best practices, and to only use third party libraries that are well maintained and up to date. Migrated Evernote's vulnerability disclosure program to a paid bug bounty program using HackerOne.

El Segundo, Ca, Us

Wrote and implemented a proposal for a low overhead video recording system to be added to the PySoy engine. Implemented the features specified in the proposal using Python, Genie, and Vala.Wrote a custom set of OpenGL bindings so that calls to OpenGL could be recorded.Designed a file format for storing OpenGL calls so that the scene they render can be recreated offline.Fixed several dozen existing bugs in a medium sized project(50k-200k LoC) across three different languages.

Dulles, Va, Us

Conducted manual and tool-assisted ethical hacks on a variety of platforms and technologies such as Android, iOS, Ruby on Rails, and ASP.NET. Tools used include Burp, Nessus, AppScan, the Android API suite, and a variety of internal tools and scanners.Wrote up discovered vulnerabilities, related evidence, reproduction steps, and remediation into a formalized report to be delivered to each client.Interacted with clients to help their development/remediation teams fully understand each vulnerability, the business risk they cause, and remediation steps required to patch each vulnerability.